RE: [ActiveDir] Blocking IE7

[Brian Desmond]

You might want to check on that again. To even qualify for erate funds as a K12 you need to be doing web content filtering.   Thanks, Brian Desmond [EMAIL PROTECTED]   c - 312.731.3132   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Hargraves Sent: Thursday, October 19, 2006 1:49 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] Blocking IE7   I believe that disabling the Automatic Updates service via GPO will block them from installing it, not 100% sure though. Since you're in an educational environment, things can be a little dicey there.  You can't restrict the internet (government funds thing) and I don't know offhand whether the IE7 installs through Windows Update are running as Local System or as the user that is logged in.  If it's running as the user account, you can simply deny them the right to install software, but if it's running as the local System, things are a little more ugly. On 10/19/06, Lucas, Bryan <[EMAIL PROTECTED]> wrote: I see how to block IE7 from deploying through WSUS, but what I don't see is a way to block a user from manually installing it.   ( http://www.microsoft.com/downloads/details.aspx?FamilyID=4516A6F7-5D44-482B-9DBD-869B4A90159C&displaylang=en)   Our users are 90% XP SP2 and managed through GP.  What about building a restricted software GPO that has a hash of iesetup7.exe (if that even exists)?   I want to restrict them from getting it through microsoftupdate.com as well.   Bryan Lucas Server Administrator Texas Christian University